Edge tuning

Optional edge env knobs. Defaults suit a typical node; raise the limits under sustained or bursty load. All are plain env vars — set them with -e on Docker or under controllers.main.containers.main.env in the chart.

Limits

# Hard cap on simultaneously in-flight TCP connections. New accepts over
# the cap close the socket and bump connections_rejected_overload.
TOWONEL_EDGE_MAX_INFLIGHT_CONNECTIONS=50000   # default 50000 (≈ ulimit -n)

# Per-listener cap on tracked UDP sessions. Drop-new (not LRU) so a
# spoofed-source flood can't evict an established session.
TOWONEL_EDGE_MAX_UDP_SESSIONS_PER_LISTENER=4096   # default 4096

# Per-tenant connection cap.
TOWONEL_EDGE_MAX_CONNECTIONS_PER_TENANT=1000   # default 1000

Shutdown

# How long shutdown waits for in-flight connections before forcing them
# closed. Kept under the 30s Kubernetes grace period so the edge exits
# before SIGKILL.
TOWONEL_EDGE_DRAIN_TIMEOUT_SECS=25   # default 25

Region

TOWONEL_EDGE_REGION=EU   # default EU

One region label per edge. Pair it with a nodeSelector/affinity when you run one release per region.

Optional HTTP listener

Disabled unless set. Adds a plain-HTTP listener for Host-header routing and ACME HTTP-01.

TOWONEL_EDGE_HTTP_LISTEN_ADDR=0.0.0.0:80

Port reservation matching

When the hub enforces port reservations, list the edge’s raw public IPs (no port) so reservations match:

TOWONEL_EDGE_PUBLIC_IPS=203.0.113.10,2001:db8::10